How to write a Fortify Custom Rule for a Spring Controller Method
I am starting out in the world of creating Custom Rules for Fortify in order to maximize the analysis. I would like to detect a specific case that occurs when a GetMapping method controller receives a personal identification document as a PathVariable. This issue could lead to an information exposure vulnerability and serve as an entry point.